WHAT IS CLAIMED 
LA method for obtaining a shared secret key, comprising the steps of: 
5 identifying a first shared random nimiber; 

identifying a second shared random number; and 

obtaining the shared secret key from an output of a combining function having a first input 
1 0 including said first shared random number and having a second input including said 

second shared random number. 

2. The method of claim L wherein said combining function includes a logical function. 

3. The method of claim 2, wherein said logical function includes an exclusive or (XOR) 
function. 

15 

4* A method for obtaining a shared secret key utilized in a network having at least a first 
computer and a second computer, said method comprising the steps of: 

^43 transmitting a first message from said first computer to said second computer, said first 
jlo message including a first shared random number; 

r I generating a second shared random number in said second computer; and 

f^C generating a shared secret key from an output of a combining function having a first input 
g 25 including said first shared random number and having a second input including said 

is^ second shared random number. 

£3 5. The method of claim 4, further comprising the step of transmitting a second message from 

11 said second computer to said first computer, said second message including said second 

CfeO shared random number. 

6. The method of claim 5, wherein said first message is encoded using an encoded password. 

7. The method of claim 6, wherein said encoded password is an encrypted password. 

35 

8. The method of claim 6, wherein said step of encoding said first message comprises 
encrypting said first message using said encoded password. 

9. The method of claim 5, wherein said first message also includes an asymmetric key. 

40 

10. The method of claim 9, wherein said second message is encoded using said asymmetric 
key. 

11. The method of claim 10, wherein said second message is encrypted using said 
45 asymmetric key. 

12. The method of claim 5, wherein said combining function includes a logical function. 
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13. The method of claim 12, wherein said logical function includes an exclusive or (XOR) 
function. 

5 Itfj^. An electronic data signal including information encoded using a shared secret key, 

wherein said shared secret key is obtained from an output of a combining function having a 
first input including said first shared random number and having a second input including 
said second shared random number. 

10 |^>4^The data signal of claim 13, wherein said data signal is propagated through a network. 

I L >5f The data signal of claim 13, wherein said information is encoded using said shared secret 
' key. 

15 | "/i^The data signal of claim 15, wherein said information is encrypted using said shared 
secret key. 

\(L yf. The signal of claim 13, wherein said signal comprises a packet of data representing a 
^ portion of said information. 

y J^^The signal of claim 13, wherein said signal is a wireless signal. 

% The signal of claim 13, wherein said signal is embedded in a carrier wave. 

2^5 p^j 26^ The signal of claim 13, wherehi said signal is propagated as an analog signal. 

v9 - The signal of claim 13, wherein said signal is propagated as a digital signal. 

W O The signal of claim 13, wherein said combining function includes a logical function. 

The method of claim 22, wherein said logical function includes an exclusive or (XOR) 
function. 



A method for obtaining a shared secret key, comprising the steps of: 

receiving a first message including a first shared random number; 

identifying a second shared random number; 

40 obtaining the shared secret key from an output of a combining function having a first input 
including said first shared random number and having a second input including said 
second shared random number. 

^j2i,.-25rThe method of claim 24, further comprising the step of transmitting a second message 
45 including said second shared random number. 

Q The method of claim 25, wherein said step of identifying a second shared random number 

^ ' comprises generating said second shared random number. 
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9((^27rThe method of claim 25, wherein said first message is encoded using a first key obtained 
using information obtained from a password. 

The method of claim 27, wherein said first message is encoded using a first key obtained 
5 j using information obtained from a password. 

0^ O^a'^Trhe method of claim 28, wherein said first message is encrypted using a first key 
obtained using information obtained from a password. 

lO^L^^The method of claim 27, wherein said first key is obtained by encoding said password. 

^ j2j3lTThe method of claim 30, wherein said step of encoding said password comprises 
^ encrypting said password. 

IS^^L^^^ho method of claim 27, wherein said first message also includes a second key. 

^ j^p3?T'The method of claim 32, wherein said second key is an asymmetric key. 

^^^^fTrhe method of claim 32, wherein said second message is encoded with said second key. 

t|^^^3^The method of claim 34, wherein said second message is encrypted with said second key. 

If ^AJ^Tht method of claim 32, further comprising receiving said password from a user. 

^l5^^-37^he method of claim 24, wherein said combining function includes a logical function. 

^ n Q -SSffhe method of claim 24, wherein said logical function includes an exclusive or (XOR) 
% ^ \ function. 

kit Q^- 

WO^Ji^/h\Q method of claim 27, wherein said first key is generated using an encoded password 
|| obtained from said password. 

J^l ^ ^ J^&^hG method of claim 39, wherein said encoded password is an encrypted password. 

35 / rB^^rl'he method of claim 40, wherein said encrypted password is obtained from an output of a 
^ one-way function having an input including said password. 

^3>^2^he method of claim 41, wherein said one-way function is a hash function. 

40 /^^^STrhe method of claim 27, further comprising the step of receiving said password from a 



user. 



5^4<^he method of claim 43, further comprising transmitting information identifying said 



' user. 
45 

le method of claim 43, wherein said user is a human user. 



IP <7>l^The method of claim 43, further comprising the step of obtaining said first key fi-om an 
T ' output of a one-way function having an input including said password. 
50 
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4^ The method of claim 43, further comprising decrypting said first message using 
information obtained fi-om said password. 

t^^J^, The method of claim 27, further comprising transmitting identification information for a 
5 user. 

^^^>l^The method of claim 27, wherein said first message also includes a second key. 

^)j<f.Thc method of claim 49, wherein said second key is an asymmetric key. 

^i^s^l^The method of claim 50, wherein said second message is encoded with said second key. 

^^^^^TThe method of claim 37, wherein said second message is encrypted with said second key. 

1 5 . Ji^The method of claim 5 1 , wherein said second message also includes a timestamp. 

v^^Trhe method of claim 27, wherein said first message also includes a timestamp. 

\^(/-55TThe method of claim 27, wherein said first message also includes a second key and a 
2U timestamp. 

-^The method of claim 55, wherein said second key is an asymmetric key. 

5| ^ A device including at least one processor, said at least one processor executing software 
h 25 instructions for obtaining a shared secret key, said software instructions comprising a 

software module identifying a first shared random number and a second shared random 
yj number and obtaining the shared secret keybased on said first shared random number and 
u said second shared random number, wherein the device is capable of transforming messages 
fc^ using the shared secret key. 

I <S^, The device of claim 57, wherein the first shared random number is communicated to a 



§J ■ user. 



I j^j^Q device of claim 58, wherein the shared secret key is obtained from said user. 
35 

, I -60rThe device of claim 57, wherein the shared secret key is obtained from an output of a 
^ ' combining function having a first input including said first shared random number and having 
a second input including said second shared random number. 

40 ...,61^ The method of claim 60, wherein said step of identifying a first shared random number 
comprises generating said first shared random number. 

[/^j62r The method of claim 61, wherein said step of identifying a second shared random number 
comprises receiving a second message including said second shared random number. 

45 . 

1/ V&3^ The method of claim 60, wherein said step of identifying a second shared random number 
comprises generating said second shared random number. 

K 

\J J^, The method of claim 63, wherein said step of identifying a first shared random number 
50 comprises receiving a first message including said first shared random number. 
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^^^^ The device of claim 60, wherein said device is capable of transforming messages by 
encoding messages using the shared secret key. 

5 The device of claim 65, wherein said encoding messages using the shared secret key 
comprises encrypting messages using the shared secret key. 



y^J^. The device of claim 60, wherein said device is capable of transforming messages by 
decoding messages using the shared secret key. 

{J\ The device of claim 67, wherein said decoding messages using the shared secret key 
comprises decrypting messages using the shared secret key. 

^ 0-69rThe device of claim 60, wherein said device comprises a computer. 

is' 

fj I --TCT The device of claim 60, wherein said device comprises a handheld device. 

<\ ^ The device of claim 60, further comprising a memory coupled to said processor, wherein 
at least a portion of said software module is stored in said memory. 

20 

O r)"^ A device including at least one processor, said at least one processor executing software 
Mi / instructions for obtaining a shared secret key, said software instructions comprising a 
ll software module parsing a first message including a first shared random number to identify 
It said first shared random number, identifying a second shared random number, and obtaining 
25 the shared secret key from an output of a combining function having a first input including 
said first shared random number and having a second input including said second shared 
i^ - random nxunber, wherein the shared secret key is used by the device to transform messages. 

device of claim 72, wherein said device decrypts said first message. 

C3 n L<34rThe method of claim 72, wherein said step of identifying a second shared random number 
|| ' comprises generating said second shared random number. 

-^TSTThe device of claim 72, wherein said device transmits a second message including the 
35 second shared random number. 

^1^.^ The device of claim 75, wherein said first message is encoded using a first key obtained 
using information obtained from a password. 

40 The device of claim 76, wherein said first message is encrypted using a first key obtained 

using information obtained from a password. 



The device of claim 76, wherein said first message also includes an asymmetric key. 



1U 

device of claim 78, wherein said second message is encoded with said asymmetric 

0^ key. 

device of claim 79, wherein said second message is encrypted with said asymmetric 

key. 

50 
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^ A device including at least one processor, said at least one processor executing software 
instructions for obtaining a shared secret key, said software instructions comprising a first 
software module identifying a first shared random number, parsing a second message 
including a second shared random number to identify said second shared random number, 

5 and obtaining the shared secret key from an output of a combining fimction having a first 
input including said first shared random number and having a second input including said 
second shared random number, wherein the shared secret key is used by the device to 
transform messages. 

10 -82r The device of claim 81, wherein said device decrypts said second message. 

^^-83r The method of claim 81, wherein said step of identifying a first shared random number 
comprises generating said first shared random nxmiber. 

15 ^^^The device of claim 81, wherein said software module generates a first message including 
said first shared random number. 

5^-857 The device of claim 84, wherein said first message also includes a second key. 

20 ^ *^6rThe device of claim 85, wherein said first message also includes an asymmetric key. 

12 $ device of claim 86, wherein said second message is encoded with said asymmetric 

I key. 

m Si 

il5 •Bdr, The device of claim 87, wherein said second message is encrypted with said asymmetric 
U- key. 

^ ^ ^J^. The device of claim 85, wherein said first key corresponds to a password known by a 
user. 

hm 

j -90r A machine-readable storage medium containing instructions for a processor, said 
3 instructions being the steps for the processor, comprising: 



35 



encoded computer means for identifying a first shared random number; 
encoded computer means for identifying a second shared random nxmiber; and 



encoded computer means for obtaining the shared secret key from an output of a combining 
fimction having a first input including said first shared random number and having a 
40 second input including said second shared random number. 

A storage medium according to claim 90 wherein said storage medium is at least one of a 
group including semiconductor memory device, magnetic device, optical device, magneto- 
optical device, floppy diskette, hard drive, CD-ROM, magnetic tape, computer memory, and 
45 memory card. 

storage medium according to claim 90, wherein said combining fimction includes a 
logical fimction. 
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^^^STA storage medium according to claim 92 wherein said logical function includes an 
exclusive or (XOR) function. 

machine-readable storage medium containing instructions for a processor, said 
5 instructions being the steps for the processor, comprising: 

encoded computer means for parsing a first message including a first shared random number 
to obtain said first shared random number; 

10 encoded computer means for identifying a second shared random number; and 

encoded computer means for obtaining the shared secret key fi-om an output of a combining 
function having a first input including said first shared random number and having a 
second input including said second shared random number. 

^,^5^The storage medium of claim 94, further comprising encoded computer means for 
decrypting said first message. 

The storage medium of claim 94, further comprising encoded computer means for 
20 generating a second message including said second shared random number. 

1| ^^?rThe storage medium of claim 96, wherein said first message is encoded using a first key 
|| obtained using information obtained from a password. 



8^ 



The storage medium of claim 97, wherein said first message is encrypted using a first key 
^ obtained using information obtained fi:om a password. 

f I S9\ The storage medium of claim 97, wherein said first message also includes an asymmetnc 
H key. 

BO . 

SI \ "^Jl©©: The storage medium of claim 99, wherein said second message is encoded with said 
asymmetric key. 



JrCrT The storage medium of claim 100, wherein said second message is encrypted with said 
35 asymmetric key. 



13 J-02r A machine-readable storage medium containing instructions for a processor, said 
instructions being the steps for the processor, comprising: 



40 encoded computer means for identifying a first shared random number; 

encoded computer means for parsing a second message including a second shared random 
number to obtain said second shared random number; and 

45 encoded computer means for obtaining the shared secret key fi"om an output of a combining 
function having a first input including said first shared random number and having a 
second input including said second shared random number. 

The storage medium of claim 102, further comprising encoded computer means for 
50 decrypting said second message. 
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\ jM'. The storage medium of claim 102, further comprising encoded computer means for 
transmitting a fu-st message including said first shared random number. 

The storage medium of claim 104^ wherein said first message also includes a second 

key. 

The storage medium of claim 105, wherein said second key is an asymmetric key. 



10 The storage medium of claim 106, wherein said second message is encoded with said 

asymmetric key. 

V^^tOSTThe storage medium of claim 107, wherein said second message is encrypted with said 
asymmetric key. 

15 Q 

The storage medium of claim 105, wherein said first message is encoded using a first 

key. 

\\\4WCThe storage medium of claim 109, wherein said fu"st message is encrypted using a first 
^20 key. 

'if \\'^:^4+tTThe storage medium of claim 109, wherein said first key corresponds to a password 
pi known by a user. 

fiis^^'^Ml^ A method for obtaining a shared secret key, comprising the steps of: 

ijj identifying a first shared random number; 

^ ■■ . 

P receiving a second message including a second shared random number; and 

|50 

|| obtaining the shared secret key from an output of a combining function having a first input 
including said first shared random number and having a second input including said 
second shared random number. 

35 -HrT. The method of claim 1 12, further comprising the step of transmitting a first message 
including said first shared random number. 

\^ The method of claim 113, wherein said step of identifying a first shared random number 
comprises generating said first shared random number. 

40 

V^^ii+S: The method of claim 113, wherein said first message is encoded using a first key. 
O^^laJ^The method of claim 115, wherein said first message is encrypted using a first key. 
45 \^-t?rThe method of claim 115, wherein said first message also includes a second key. 
N^^vVH-SrThe method of claim 115, wherein said first key corresponds to a password. 



50^ 



li+igrThe method of claim 118, wherein said first key is an encoded password. 
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\ 4£©rThe method of claim 1 19, wherein said first key is an encrypted password. 

\ The method of claim 1 1 8, wherein said step of obtaining the shared secret key comprises 

obtaining the shared secret key fi:om an output of a combining function having a first input 
5 including said first shared random number and having a second input including said second 
shared random number. 

\'^%^Tho method of claim 121, wherein said combining fimction includes a logical fimction. 

10 \'^dfe37The method of claim 122, wherein said logical function includes an exclusive or (XOR) 
function. 

\''^42CThe method of claim 117, wherein said second key is an asymmetric key. 



15 ^ ^nfes: The method of claim 117, wherein said second message is encoded with said second 
key. 
c\ 

The method of claim 125, wherein said second message is encrypted with said second 

key. 

Hi X^^^ThQ method of claim 125, further comprising decoding said second message. 

If \^^^i^JhQ method of claim 127, wherein said decoding said second message comprises 
ll decoding said second message using a third key. 

hk \ ^429rThe method of claim 128, wherein said third key and said second key form an 
y| asymmetric key pair. 

The method of claim 129, further comprising the step of generating said asymmetric key 

N^O pair. 

IJ X'^Ziat: The method of claim 130, wherein said asymmetric key pair is generated dynamically. 

\^^^2: The method of claim 130, wherein said asymmetric key pair is selected firom a set of 
35 pre-generated asymmetric key pairs. 

The method of claim 115, further comprising receiving information identifying a user. 



V'^^^J^CThe method of claim 133, wherein said first key is associated with said user. 
40 / 

y'^^^^STThe method of claim 134, wherein said first key corresponds to a password known by 
said user. 

V^^^iWrhe method of claim 135, wherein said first key is an encoded value of said password. 

V^,Ss?rThe method of claim 135, wherein said encoded value of said password is an encrypted 
value of said password. 

method of claim 136, wherein said first key is a value of said password after being 
50 sent through a one-way function. 
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The method of claim 136, further comprising the step of obtaining said first key by 
looking up said user in a password file. 

5 The method of claim 139, wherein said password file contains an encoded password. 

I >4lTThe method of claim 140, wherein said encoded password is an encrypted password. 

\ The method of claim 139, wherein said password file is encoded. 

The method of claim 142, wherein said encoded password file is an encrypted password 
file. 

I 3l44rThe method of claim 115, wherein said first message also includes a second key. 

1 ^^^^The method of claim 144, wherein said second key is an asymmetric key. 

I !;^l^The method of claim 145, wherein said second message is encoded with said second 
key. 

The method of claim 146, wherein said second message is encrypted with said second 

key. 

|| ^3^8TThe method of claim 146, wherein said second message also includes a timestamp. 

b4 \ ^J45CThe method of claim 115, wherein said first message also includes a timestamp. 

l ^^jJoTThe method of claim 115, wherein said first message also includes a second key and a 
M timestamp. 

h%0 



X i' 



^AS(^ThG method of claim 150, wherein said second key is an asymmetric key. 
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